European Data Protection Supervisor
European Data Protection Supervisor

Complaint form

Complaint form

  1. English
  2. English
 
1 Start 2 Preview 3 Complete

Before you lodge your complaint, please take a moment to read our Data protection notice.

An asterisk (*) denotes mandatory items. Not replying to mandatory items in the form would leave us unable to properly investigate the complaint and may render your complaint inadmissible.

What is your complaint about?

Please note that according to Article 68 of Regulation 2018/1725, only persons employed with the EU institutions, bodies and agencies have standing to lodge complaints relating to facts that do not concern them personally, acting as whistle-blowers. However, the EDPS may launch own-initiative inquiries concerning breaches alleged by outside persons not personally concerned by the processing.

Please note that the EDPS is only competent for dealing with complaints against processing by the EU institutions, bodies and agencies. Please also note that we are currently not competent for supervising Eurojust. For complaints concerning Eurojust, please contact the Eurojust JSB
Please note that the EDPS will usually not investigate complaints relating to facts which the complainant learned about more than two years ago.
The maximum file size is 3 MB per file and you can provide three files at most. If you want to submit additional documents, please let us know. If your supporting documentations adds up to more than 40 pages, please provide a summary.
Files must be less than 3 MB.
Allowed file types: pdf doc docx odt ppt pptx odp xls xlsx ods.
Files must be less than 3 MB.
Allowed file types: pdf doc docx odt ppt pptx odp xls xlsx ods.
Files must be less than 3 MB.
Allowed file types: pdf doc docx odt ppt pptx odp xls xlsx ods.

Which other steps have you already taken?

If you have not yet contacted the institution (the controller), we recommend that you do so before submitting your complaint. Each institution has a Data Protection Officer (DPO), who may be in a better position to assist you in resolving the issue. As DPOs are closer to the institutions, they may be able to help you more quickly. For the exercise of your right (of access etc.), please always contact the controller first.

Contact information

9. Your Name (please note: if you are a lawyer acting on behalf of a client, please enter your client's name here, not yours - please enter your details under "contact information" below and attach a power of attorney)

please include country information

Confidential treatment

12. The EDPS treats all complaints confidentially. However, the investigation of your complaint may require disclosing your identity and the allegations you made to the institution against which you complained and, if necessary for the investigation, to the third parties involved, including national supervisory authorities where relevant. The EDPS will also copy the Data Protection Officer (DPO) of the institution concerned into all correspondence between the EDPS and the institution in question. If it turns out that your complaint falls into the competence of a data protection authority of a Member State, we will forward your complaint to them, as they are the ones who can investigate it. Any public summaries of cases (e.g. for the annual report of the EDPS) will be completely anonymous.